{"id":"GHSA-56r6-ccm5-8hg3","aliases":[],"url":"https://o3.security/vulnerability/GHSA-56r6-ccm5-8hg3","summary":"Alchemy Non-SMA and Webauthn Account Security Advisory","details":"### Impact\nA potential security issue has been mitigated on old account deployment functions from the factory. Smart wallets in use on all existing supported networks are not impacted.\n### Patches\nPlease direct creation of new wallets to either `createSemiModularAccount` on `AccountFactory.sol` or `createWebAuthnAccount` on `WebAuthnFactory.sol`.","published":"2025-07-21T14:20:40Z","modified":"2025-07-21T14:20:40Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"@account-kit/smart-contracts","fixedVersion":"4.52.0"}],"fix":{"url":"https://github.com/alchemyplatform/aa-sdk/commit/b343437a9e4a833c25fed7bc8785a815cbbae0ee","label":"alchemyplatform/aa-sdk@b343437"},"references":[{"type":"WEB","url":"https://github.com/alchemyplatform/modular-account/security/advisories/GHSA-56r6-ccm5-8hg3"},{"type":"WEB","url":"https://github.com/alchemyplatform/aa-sdk/commit/b343437a9e4a833c25fed7bc8785a815cbbae0ee"},{"type":"WEB","url":"https://github.com/alchemyplatform/modular-account/commit/2352c9b692935ba97d98619cb31ba1653eee241f"},{"type":"PACKAGE","url":"https://github.com/alchemyplatform/modular-account"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-07-21T14:20:40Z"}}